IST.ISTbar - new flavour with nkrha.exe

  • Thread starter Thread starter Antonio
  • Start date Start date
A

Antonio

I've found that the nkrha.exe is not detected by Microsoft
Antispyware (or any other software) and an internet search
does not produce any hits.

It appears to regenerate ISTbar registry keys after reboot.

By using:

Antispyware->Advanced Tools->System Explorers->Startup
Programs

this executable may be blocked from startup.
 
Please submit a Tools, suspected spyware report from a
machine with this item in place, if possible.

Thanks for the report.
 
Please submit a Tools, suspected spyware report from a
machine with this item in place, if possible.
Click to expand...
Unfortunately, I can't seem to do that. An error occurs
when submitting the report, and asks me to check Internet
Proxy settings. However, Antispyware is able to check ans
download updates using my current internet settings.

Is there an email address I can send the report file to?
 
I don't have an alternative method of submitting a report, I'm afraid. The
report won't send binaries, but it would show the executable's presence in
some startup location. At the current time, that's the best I know to do,
in terms of getting information across. You can bet that the Microsoft team
working on this has good channels of communication open with the
anti-spyware community who monitor new bugs closely--but I'm not in the loop
on how that's accomplished.
 
Antonio ... would you please rename nkrha.exe to nkrha.xxx, compress it
to a .zip folder, and email it to me ? Name the .zip folder "sample". I
have a way to get the file to MS directly. Thanks.


Steve Wechsler (akaMowGreen)
MVP Windows Server
 
Back
Top